CISSP passed after 30 days.
So I should preface, I've been in Security for 15 years, manager for
the last 8 or so. Kept putting off my CISSP, due to life and other
stuff. I got my CEH two years ago as my boss wanted all my staff to have
it, so I figured lead by example. He also wanted me to have the CISSP, so I've finally obliged.
My main study was the updated Shon Harris book on google play, which I will admit I skimmed. ITProTV (which my work pays for) has a CISSP accelerated course, which I watched right the way through... at 1.5-1.8 speed. Re-watched episodes I wasn't sure of. Then Boson Exams to verify weak areas and restudy, if it wasn't in my notes I'd look in the book or simply write out the explanation from Boson. I also used the CISSP flashcards that were on quizlet and the free apps rocket prep and CISSP flash card (I don't think the free ones were that valuable.)
Got lots of questions on SDLC, asset management and risk assessments,
a couple on OSI and TCP/IP in models. I knew security models backwards
and didn't get any questions on it
The below videos were suggested by someone on here, and I think they helped immensely.
https://www.youtube.com/watch?v=-99b1YUFx0A
A bit from my notes below that was super valuable from the above videos.
Be a risk advisor/manager, don't fix problems don't look at technical in questions. Physical safety is always the first choice. Pick the option that is cheapest to solve the problem Plan, do, check, act. Which phase is the question in.
Happy to answer any questions.
Wondering what to do next. I want to start an IT Security masters next year, and they give a subject credit each for the Security+ (which I never got, but doing the practice exams I get 90+%), the CISM, and the CRISC. Thinking I might go CISM next, any suggestions?
"Brain does not meet certification requirements, please install more certifications" Me
Currently Studying: Cyber Security masters and ISC2 CCSP.
Security blog; http://security.morganstorey.com
Comments
Congrats! I might do the same with CISSP, been putting it off and every time I attempt to read anything just get bored. Maybe next year if I find myself with nothing else to do (big IF..)
@UnixGuy Yeah I got bored too.. watching the accelerated ITProTV course at 1.8 speed meant I stayed interested :P
"Brain does not meet certification requirements, please install more certifications" Me
Currently Studying: Cyber Security masters and ISC2 CCSP.
Security blog; http://security.morganstorey.com
Connect With Me || My Blog Site || Follow Me
"Brain does not meet certification requirements, please install more certifications" Me
Currently Studying: Cyber Security masters and ISC2 CCSP.
Security blog; http://security.morganstorey.com
Congratulations!
"Brain does not meet certification requirements, please install more certifications" Me
Currently Studying: Cyber Security masters and ISC2 CCSP.
Security blog; http://security.morganstorey.com